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Applicant acknowledges the Examiner's consideration of the references cited with the 
Information Disclosure Statement tiled December 16, 1999* 

Slaius of the ArfplUation 

Claims 1-37 are all the claims pending in the Application, and claims 1-37 have been 

rejected. 

Claim Objections 

The Examiner has objected to clainis 3, 30, 34 and 36 due to minor informalities. The 
informalities noted by the Examiner have been corrected. Thus, withdrawal of the objeclion is 
respectfully requested. 

IndefinUencss Rejection 

The Examiner has rejected claims 1, 6» 10, 17 and 22 a.s allegedly being indefinite under 

35 U,S,C. § 112, second paragraph. The Examiner alleges that "the term 'unique" is a relative 

term and is not defined by the claim, the specification does not provide a standiird for 

ascertaining tlie requisite degree, and one of ordinary skill in the art would not be reasonably 

apprised of the scope of the invention" (Office Action, pg, 2). 

However, Applicant respeeifuUy submits that the term "unique'* is not relative, but rather 
is used in ihc claims according to its well Vniown ordinary and accustomed meaning. 

Thus, Applicimt respectfully requests withdrawal of this rejection. 

35 US.a $ 101 Refection 

The Examiner has rejected claims 17 and 22 under 35 U.S.C. § 101 , alleging that ''the 

claimed recitation of a use, without setting fortli any steps involved in the process* results in an 
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improper definition of a process, i.e., results in a claim which is not a proper process claim under 
35 U.S.C. § 101" (Office Action, pg. 3). 

However, Applicant respectfully submits that this rejection is improper for at least two 
reasons. First, Applicant believes the Examiner to be basing this rejection on MPEP $ 
2173,05(q), which is directed to "use" claims (e.g, process for using" or 'Ihc use of). 
However, MPEP 2173.05(q) is inapplicable in this instance* as claims 17 and 22 respectively 
recite an "access control method" and a "computer-readable medium having computer- 
executable code stored thereon," not a "use." 

Further, even if MPEP § 2173.05(q) were applicable to these claims. Applicant 
respectfully submits that claims 1 7 and 22 do recite discrete steps, as both claims 1 7 and 22 
clearly recite, for example, "requesting access for a user to a remote resource." 

Thus, Applicant respectfully requests withdrawal of this rejection, 

AntMpation Rejections 

The Examiner has rejected claims 1-16 under 35 U.S,C. § 102(e) as being anticipated by 

Saiio (US 6,076,077; hereinafter "5^/7^-;"), and clainris 17-37 under 35 U.S,C. § 102(e) as being 

anticipated by Sonderegger (US 5,893,1 18; hereinafter ''Sonderegger''). These rejections ace 

respectfully traversed: 

Claims I -16 

Sailo discloses a system for managing copyrights, wherein various copyrighted content, 
such as M4, M5 and M6 in FIG. 2, are stored in databases 1, 2 and 3 in FIG. i. When this 
content is distributed, it is encrypted using secret keys {e.g., Ks21 , K$22, Ks23), A user can 
rcquesi these keys to be able to decrypt the content (col. 9, lines 18-24). 
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rhus, Saito merely discloses a system where various rights can be assigned to specific 
transmitted (iles so that they cannot be decrypted by users that have not compensated the 
copyright holder. 

The Examiner alleges that all of the features of independent claims 1, 6 and 10 arc 
tliscloscd by Saito. 

However, Saiio fails to teach or suggest "a second storage area having stored therein an 
object identifier that ideniifies the object, wherein the object identifier is unique within and 
outside of the storage system," as recited in claims 1 and 6, or "storing an object identifier in the 
storage system, wherein the object identifier identities the object, and the object identifier is 
unique within and outside of the storage system," as recited in claim 10. 

SaUo is simply silent with respect to the provision of any storage of an object identifier, 
or that such an "object identifier is unique within and outside of the storage system/' 

In fact, even the portion of Sailo cited by the Examiner as allegedly disclosing these 
features (co). 4, lines 19-25) simply discloses a relationship between a "method** and an "object" 
and their inteirelated usefulness. It does not disclose any object identifier. 

Thus, Applicant respectfully submits that independent claims 1, 6 and 10 axe patentable 
over the applied reference. Additionally, Applicants respectfully submit that rejected dependent 
claims 2-5, 7-9 and 11-16 arc allowable, at least by virtue of their dependency. 

Further, Applicants respectfully submit that these dependent claims are separately 
patentable over the applied reference. 
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For example, Applicants respectfully submit that claims 2, 4, 7, 9, 11 , 14 and 15, which 
recite that ''the object identifier is a Universal Unique Identifier (UUID) " are all separately 
paten taBDUaarcdE tiinif^phbaadmrf^ifaincef UUIDs in Saito, and the portion oiled by the Examiner as 
disclosing them (col. 4, line 63 - co), 5, line 6), is directed to an encryption operation, and does 
not disclose LTUTDs. 

Thus, Applicants respectfully request that the Examiner withdraw this rejection. 
Claims 17' 37 

Soruleregger discloses a system whereby a JAVA client 40 identifies a desired JAVA 
software component (which is identified by, e.g., a UUID) and looks to see of it is already loaded 
to a local hash tabic 44 (col. 9, lines 5-10), If the desired component is not loaded, the JAVA 
client queries database 52 to determine if the desired component is stored therein by looking for 
its identifier. If the desired component is found it is loaded into JAVA client 40 for use thereby 
(coL 10, lines 1-7; 23-25). 

The Examiner alleges that all of the features of independent claims 17, 22, 24» 27, 30, 34 
and 36 ai'c disclosed by Sojideregger. 

In contrast, Applicant respectfully submits that each of these claims recite features that 
iire not taught or suggested by Scmderegger, as discussed in the following paragraphs. 

Regarding claims 17 and 22, Applicant respectfully submits that Sonderegger fails Lo 
teach or suggest at least "requesting access for a user to a remote resource, wherein the request 
includes a subject identifier for use in inaking an access control decision, and wherein the subject 
identifier is unique within and outside of the remote resource and identifies the user." 
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As discussed above, Svndcrcf^ger is directed towards the retrieval of JAVA components 
by a JAVA client. Sonderegger never discloses any ability or functionality to "request access for 
a user to a remote resource," as the user's access is simply not considered in Sonderegger, 

Furtiier, there is no teaching or suggestion of any ability or functionality to make "an 
access control decision," as Soiuieregger does not make access control decisionis relative to its 
database 52, which is never disclosed as being inaccessible to JAVA client 40 should it need 
additional JAVA components. 

Regarding claim 24» Applicant respectfully subniits that Sonderegger fails U) teach or 
suggest at least "establishing a secure communication path between a reference monitor 
protecting the objex:t and a resource manager having information describing the user, in response 
to a request by the user Lo access the object" or "sending a request for user information from the 
protecting reference monitor to the resource manager, the request including a subject descriptor 
for the user, wherein the subject identifier is a Univei*sal Unique Tdentitier (UUID)/' or 
"receiving, in response to the request, the user information located based on the subject 
identifier.*' 

As discussed above, Sonderegger is silent with respect to storing informaLion about a 
user, or allowing a user lo access any object Rather, Sonderegger is directed towards the 
retrieval of JAVA components by a JAVA client. 

Further, Sonderegger is silent regarding establishing any "secure communication path" 
between any poitions therein, or to providing any "reference monitor" to protect its database 
contents. As discussed above, Sonderegger discloRes^ no ability to prevent access to its database 
52, and no need to provide a secure communication path therein. 
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Regarding claims 27 and 30, Applicant respectfully submits tliat Sonderej^ger fails to 
teach or suggest ai least "an access control unit for determining if a requestor is authorized to 
access a protected object stored in the collection/* or that "the resource manager receives a users 
request for access to the protected object, the request including a globally unique identifier for 
the user requesting the access." 

As discussed above, Sonderegger is silent widi respect to storing or using any 
iiifunnuiion about a "user," or determining if a "requestor" is "authorized" to access its 
databases. Rather, Sonderegger is directed towards the retrieval of JAVA components by a 
JAVA client. 

Further, Sonderegger is silent regarding any objects within its database 52 being 
"protected." As discussed above, Sonderegger d\<ic\o^^s no ability to prevent access to its 
database 52, or to protect any of the content thereof- 
Regarding claims 34 and 36, Applicant respectfully submits that Sonderegger fails to 
teach or suggest at least "sending a globally unique identifier for a user to a name resolving 
device, and receiving there from information about the user" and ''sending lo a storage 
management system containing an object a request for access to the object, the request including 
the information about the user." 

As discussed above, Sondregger is silent with respect to storing or using any infoniaation 
about a "user." Rather, Sonderegger is directed towards the retrieval of JAVA components by a 
JAVA client. 

Thus, Applicant respectfully submits that independent claims 17, 22, 24, 27, 30, 34 and 
36 are patentable over the applied reference. Additionally, Applicants respectfully submit that 
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rejected dependent claims 18-23, 25, 26, 28, 29, 31-33, 35 and 37 are allowable, at least by 
virtue of their dependency. 

Thus, Applicants it;speclfully request that the EAaminer withclruw this rejection. 

Cunclusioji 

In view of the foiiegoing, ir is respectfully submitted that claiins 1-37 ajie allowable. 
Thus, it is respectfully submitted that the application now is in condition for allou^ance with all 
i)f the claims 1-37, 

If any points remain in issue which the Examiner feels may be best resolved through a 
personal or telephone interview, the Examiner is kindly requested to contact the undersigned at 
the telephone number listed below. 

Please charge any fees which may be required to maintain the pendency of this 
application, except for the Issue Fee, to our Deposit Account No. 1 9-4880. 

I hereby certify that the above identified correspondence is being facsimile transmitted to 
Extiminer Leynna A. Ha at the Patent and Trademark Office on February 10, 2004 at 
703.872.9306. 

Respectfully sujxoittcd, 

yC<^^t^''0^^ — - 

S I JC/H R UE MION, PLLC Timothy P. Crtsmen 

2100 Pennsylvania Avenue, N.W. Regisuation No. 50,855 

Washington, D.C. 20037-3213 
Telephone: (202) 293-7060 
Facsimile: (202) 293-7860 
WASiuNijroN omcE 

23373 

Date: February 10, 2004 
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